$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer File: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer (raw, json) Hash identifier: 2ClCRqesQiUVDH+cVzd9S673K/4p6+qq6JFQxZEIl4c= Subject key identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E31D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:13:37 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 202.38.176.0/23 IP: 202.127.192.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58141 (0xe31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:13:37 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=835518B3540E89A2C3983213E02FEAAB77BDA544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:89:0f:19:1f:b9:30:f8:9e:96:ca:aa:ed: cd:66:73:50:67:d9:72:58:8d:96:cd:20:0f:4a:46: 70:db:65:fa:00:04:0b:5e:9b:37:ac:c4:f1:b9:fc: fc:36:b4:7d:d9:a1:1f:e4:df:a7:8f:01:c0:7a:a5: 1c:76:ba:2d:c6:84:6d:5b:63:5c:9d:3c:eb:df:59: 7f:41:a6:aa:3f:ef:36:de:0e:33:13:39:30:f8:f1: 19:45:37:8f:f8:63:77:69:fa:0a:1c:e6:0d:39:fb: bc:73:0d:63:9f:8b:2d:70:c5:72:33:8b:0c:27:63: af:46:91:97:5d:cc:ef:8c:ba:d2:53:70:c7:40:9d: a4:ca:16:72:18:00:89:b9:c1:7c:79:04:39:c5:09: 7d:9c:e9:99:84:70:72:d6:17:b8:c1:b7:8b:7c:bf: 3c:e7:c4:b3:98:cd:ed:07:2a:65:d1:32:f2:9f:7f: 8b:9d:66:cf:f1:1a:34:88:92:89:59:b5:db:dd:ed: e6:21:0c:4b:4f:0a:85:e0:f3:fb:58:46:33:2a:fa: 08:1d:5a:96:98:12:64:b8:69:5d:98:1e:e7:14:cb: fc:69:fa:f3:4c:75:e3:6a:cd:0e:19:e6:ea:c5:f5: 17:d8:52:94:1f:f9:9e:71:f0:7c:97:ff:cc:7e:4d: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.176.0/23 202.127.192.0/23 Signature Algorithm: sha256WithRSAEncryption 37:b1:52:3a:d2:2b:f7:d4:4e:26:f3:a3:6b:76:60:4c:79:3e: 74:b9:58:ca:8e:b5:a9:02:d3:eb:c8:fe:b5:a6:95:37:92:f8: ef:31:b7:7b:fa:72:0b:89:c1:ca:0c:1d:a6:61:ad:37:b2:86: 6d:63:7f:f0:ec:41:4d:79:00:13:dc:50:e8:ce:cb:57:63:df: 7f:50:c6:61:89:b0:6e:2d:49:79:02:a6:8c:19:92:66:70:23: 01:6c:00:97:af:c4:37:9d:03:2c:d8:61:04:30:bb:94:9b:13: 9f:a4:a6:58:80:b9:67:79:b0:b6:be:e6:bd:ee:86:ec:da:8a: 74:92:c3:47:bf:8e:5f:48:87:55:d0:8f:b1:be:59:bd:82:11: 66:33:39:14:02:d0:97:36:f6:07:40:ea:2f:0a:0a:c8:d0:12: 62:13:58:f4:aa:ff:01:0e:2e:9f:1c:45:e8:28:4c:3c:af:71: 6f:45:23:47:9a:b3:64:9f:93:b8:b1:72:79:05:59:e3:a2:ac: ea:7f:a5:d6:5e:f2:e2:bb:ee:24:c3:38:39:95:23:31:f5:ab: 06:d6:3e:51:88:83:db:5b:cb:d3:92:40:b8:05:e4:c5:7d:fa: f8:68:c5:b1:5d:c1:50:3e:ab:eb:61:56:6b:62:71:52:51:d0: fb:53:74:dd -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOMdMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEzMzdaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDgzNTUxOEIzNTQwRTg5QTJDMzk4MzIxM0UwMkZFQUFCNzdCREE1 NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUYkPGR+5MPielsqq 7c1mc1Bn2XJYjZbNIA9KRnDbZfoABAtemzesxPG5/Pw2tH3ZoR/k36ePAcB6pRx2 ui3GhG1bY1ydPOvfWX9Bpqo/7zbeDjMTOTD48RlFN4/4Y3dp+goc5g05+7xzDWOf iy1wxXIziwwnY69GkZddzO+MutJTcMdAnaTKFnIYAIm5wXx5BDnFCX2c6ZmEcHLW F7jBt4t8vzznxLOYze0HKmXRMvKff4udZs/xGjSIkolZtdvd7eYhDEtPCoXg8/tY RjMq+ggdWpaYEmS4aV2YHucUy/xp+vNMdeNqzQ4Z5urF9RfYUpQf+Z5x8HyX/8x+ TSFLAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUg1UYs1QOiaLDmDIT4C/qq3e9pUQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIyOS9nMVVZczFRT2lhTERtRElUNENfcXEzZTlwVVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3 DQEBCwUAA4IBAQA3sVI60iv31E4m86NrdmBMeT50uVjKjrWpAtPryP61ppU3kvjv Mbd7+nILicHKDB2mYa03soZtY3/w7EFNeQAT3FDozstXY99/UMZhibBuLUl5AqaM GZJmcCMBbACXr8Q3nQMs2GEEMLuUmxOfpKZYgLlnebC2vua97obs2op0ksNHv45f SIdV0I+xvlm9ghFmMzkUAtCXNvYHQOovCgrI0BJiE1j0qv8BDi6fHEXoKEw8r3Fv RSNHmrNkn5O4sXJ5BVnjoqzqf6XWXvLiu+4kwzg5lSMx9asG1j5RiIPbW8vTkkC4 BeTFffr4aMWxXcFQPqvrYVZrYnFSUdD7U3Td -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:48 2025 by rpki-client